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Abstract. Recently, several bounds have been obtained on the 
number of solutions to congruences of the type 

{xi+ s) ... {x^ + s) = {yi + s) . . . (j/^ + s) ^ (mod p) 

modulo a prime p with variables from some short intervals. Here, 
for almost all p and all s and also for a fixed p and almost all s, we 
derive stronger bounds. We also use similar ideas to show that for 
almost all primes, one can always find an element of a large order 
in any rather short interval. 



1. Introduction 

For a prime p, let ¥p be the field of residues modulo p. Also, denote 
F* = Fp \ {0}. For integers h > 3 and z/ > 1 and elements s G Fp 
and A G F*, we denote by K^{p,h,s) the number of solutions of the 
congruence 

ixi + s)...{x^ + s)={yi + s)...{y^ + s)^0 (mod p), 
1 < xi, . . .,x,y,yi, ...,yu<h. 

Recently, a series of bounds on K^{p, h, s) as well as on the number 
of solutions of a one-sided congruence 

{xi + s) . . .{x^ + s) =X (modp), 

1 < xi, . . . , Xu < h. 

have been obtained, see O HJ [8] and references therein. 

In particular, it is shown in [Ij that for any fixed integer z/ > 3 we 
have 

Kip, h, s) < + l] exp (o ( ^ 



jfje^ j \^ \ log log /l^ 

where 

ty = max{z/^ — 2z/ — 2, z/^ — 3z/ + 4}. 

Here we use and develop further some ideas of [U H] and obtain 
stronger bounds on Ky{p, h, s) 
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• for almost all p and all s; 

• for a fixed p and almost all s. 

For this purpose, we also consider the following equation with com- 
plex 0" G C: 



which is an analogue of the congruence ([T]). 

We denote by K^ih, a) the number of solutions of ([3]). Here we give 
an asymptotic formula for Ki^{h, a) that holds for almost all rational a 
and all irrational a, which could be of independent interest. 

Finally, in Section[5]we give applications of our bounds of K^{p, h, s), 
and underlying ideas, to the existence of elements of large order in short 
intervals. 

We recall that the notations A B, B ^ A and A = 0{B) are both 
equivalent to the statement that the inequality \A\ < cB holds with 
some constant c > 0. Throughout the paper, any imphed constants in 
the symbols ' <^', ' and 'O' may depend on the integer parameter 
u > 1 and sometimes on some other explicitly mentioned parameters 
and are absolute otherwise. 

As usual, we use vr(T) to denote the number of primes p < T. 



2.1. Background on geometry of numbers. Recall that a lattice in 
M" is an additive subgroup of M" generated by n linearly independent 
vectors. Take an arbitrary convex compact and symmetric with respect 
to body D C M". Recall that, for a lattice F C R" and z = 1, . . . , n, 
the ith successive minimum Aj(D,F) of the set D with respect to the 
lattice F is defined as the minimal number A such that the set XD 
contains i linearly independent vectors of the lattice F. Obviously, 
Xi{D,T) < . . . < Xn{D,T). We need the following result given in [21 
Proposition 2.1] (see also [IF, Exercise 3.5.6] for a simplified form that 
is still enough for our purposes). 

Lemma 1. We have, 



2.2. Resultant bound. Let Res(Pi,P2) denote the resultant of two 
polynomials Pi and P2. 



(3) 



{xi + a) ... {xy + cr) ={yx + a) . . . + a) 7^ 0, 
1 < Xi, . . . ...,yy<h. 



2. Preliminaries 
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Lemma 2. Let H > 1, p,i9 ^ 'R, and let M,N > 2 be fixed integers. 
Assume also that one of the following conditions hold: 

(i) P > 0; 

(ii) ^>0; 

(iii) p + ^>-l. 

Let Pi{Z) and P2{Z) be non-constant polynomials with integer coeffi- 
cients 

M-l N-l 

P^{Z) = a,Z^^~^-' and P2{Z) = ^ kZ^-^-' 

i=0 i=0 

such that 

\ai\<H'+P, i = 0,...,M-l, 
\bi\<H'+^, i = 0,...,N-l. 

ThcTi 

Res(Pi,P2) < H^M-i+p)(N-i+^)-p^^ 

where the implicit constant in <^ depends only on M and N. 

2.3. Background on algebraic integers. Let K be a finite exten- 
sion of Q and let be tlie ring of integers in K. We recall that the 
logarithmic height of an algebraic number a is defined as the logarith- 
mic height H{P) of its minimal polynomial P, that is, the maximum 
logarithm of the largest (by absolute value) coefficient of P. 

We need a bound of Chang [5l Proposition 2.5] on the divisor function 
in algebraic number fields. 

Lemma 3. Let K be a finite extension ofQ of degree d = [K : Q]. For 
any nonzero algebraic integer 'y G Tjk of logarithmic height at most H > 
2, the number of pairs (71,72) of algebraic integers 71,72 € of loga- 
rithmic height at most H with 7 = 7172 is at most exp {0{H/\ogH)), 
where the implied constant depends on d. 

Very often we use Lemma [3] for d = 1 when it gives the classical 
bound on the usual divisor function. 

Now recall that the Mahler measure of a nonzero polynomial 

d 

P{Z) = a^Z" + . . . + aiZ + ao = a, J](Z - i^) G C[Z] 

i=i 

is defined as 

d 

M{P) = \a^\Wxi,^^{\,\i,W, 
i=i 

see [m Chapter 3, Section 3] 
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We recall the following estimates, that follows immediately from a 
much more general [TH Theorem 4.4]: 

Lemma 4. For any nonzero polynomial P of degree d the following 
inequality holds 

2-<^e^(P)<M(P)<(rf+l)i/2e^(^). 
Corollary 5. For any nonzero polynomials Qi,Q2 G C[Z] we have 

H{QiQ2) = H{Q,) + H{Q2) + 0{d), 

where d = deg{QiQ2) ■ 

We also use the following result from [1]. 

Lemma 6. For any positive integer v there is a constant Cy such that 
the following holds. If Pi, P2 G Z[Z], P = P1P2, 

V 

j=0 

and for some A > and h > the coefficients of the polynomial P 
satisfy the inequalities 

uqt^O, \uj\<Ah^, j = 0, ...,z/, 

then the polynomial Pi has the form 

Pi{Z) = j2^,Z^-' 

with 

Vo^O, \vj\<C,Ah^ (j = 0,...,/i). 

2.4. Sieve arguments. We start with recalling the following result of 
Iwaniec [12j: 

Lemma 7. Let qi, . . . ,qr be r > 2 distinct primes. Then the number 
of consecutive integers each divisible by at least one of qi, . . . ,qr is 
Oir"^ log^ r). 

Corollary 8. There is an absolute constant c > such that for any 
positive integer m > 2 and a G N there are at least Ci/m/ log m multi- 
plicatively independent numbers x G [a, a + m) . 

Proof. Without loss of generality we can assume that a > 1. By 
Lemma[7l one can take r 3> \/m/ logm so that for any primes gi, . . . , 
there is a number x G [a, a+m) not divisible by gi, . . . , g^- We show the 
existence of r + 1 multiplicatively independent numbers x G [a, a + m) 
using recursive procedure. First, we take an arbitrary integer xi G 
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[a, a + m) and an arbitrary prime divisor qi of Xi. Assuming that for 
some i = 1, . . . , r the numbers Xi, . . . , Xj and prime divisors qj of Xj 
are chosen we use Lemma [7] to take Xj+i G [a, a + m) not divisible 
by qi, . . . ,qi and an arbitrary prime divisor g^+i of Xj+i. Let integers 
rii, . . . , rir+i satisfy the equahty 

„ni "r+l _ -1 

Since xi is the only number from xi, . . . ,Xr+i that is divisible by qi 
we deduce that ni = 0. Similarly, as X2 is the only number from 
X2, . . ■ , Xr+1 that is divisible by q2 we conclude that n2 = 0, and so on. 
Finally, we get rii = . . . = rir+i = as required. □ 

We also recall the celebrated Brun-Titchmarsh theorem, see [TSf 
Theorem 6.6]. 

Lemma 9. For any integer q and real y with y > 2q > the number 
7f{x, q, 1) of primes p < y with p = 1 (mod q) does not exceed 



2.5. Distribution of divisors of shifted primes. We need several 
results about divisors of shifted primes which follows from the argu- 
ments of Edos and Murty [9]. 

First of all we note that by [9l Theorem 2] we have: 

Lemma 10. For any function r]{z) > with rj{z) — )■ as z —)■ oo and 

for T — )■ oo, for all hut o{'k{T)) primes p <T the number p — 1 has no 



Furthermore, it is easy to see that the arguments used in the proof 
of P, Lemma 1] also lead to the following result (in particular, using 
the notation of [9], one can notice that the fact that u = — log£:(x) is 
not used in the proof). 

Lemma 11. There is an absolute constant cq such that for any < a < 
7 < 1 for all but cq (a7~^ + 1/ ^ogT) vr(T) primes p <T the product of 
all prime factors of p — 1 that are smaller than T° is at most T'' . 

Corollary 12. For any constant c and function r]{z) > withri[z) — )■ 
as z ^ oo and forT — )■ oo, for all but o{'k{T)) primes p < T the product 
of all prime factors ofp—1 that are smaller than T''^^'^'^^^°^^^^^^'^^^ is at 



We remark that [161 Theorem 2] gives a stronger version of Lemma [TT] 
in some range of parameters a and 7. However for our applications, it 
is essential to have an unrestricted range of parameters a and 7, thus 
Lemma [TT] is more suitable for our goal. 




divisor in [T 



l/2-r,(T)^2.1/2+,?(T)j^ 



most T^i^y^. 
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Lemma 13. Let 0<a<f3<l<X. Then for T — oo, for all but at 
most (1/A + o(l))7r(T) primes p < T the number of prime divisors q of 
p — 1 satisfying q > T" does not exceed 

#|g prime : q \ p - I, q > I |< h ^. 

Proof. Denote by N{p) the number of primes q dividing p — 1 with 
T'^ <q< T^. We have 

5^iV(p)= if{P<T ■■ P=l (modg)}. 

By Lemma [9l for g < we have 

2T 

as T — J- oo. Hence, 

p<T ^ A-/ to T"<g<T/3 

Next, by the Mertens formula, see [13, Equation (2.15)], 

^ i = log(/3/a) + 0(1) 



Therefore, 

2T 

E^(^)< (13^)1^ (M/3/«) + o(l)). 



Denoting 



we get < (1/A + o(l))T/ logT. Observing that for a prime p < T 
the number of prime divisors g > p'^ is at most 1//3, we complete the 
proof. □ 

Lemma 14. Let a > 0. Then for T > 0, for all but O (T^~") primes 
p <T the number p — 1 has no divisors of the form q^ with an integer 
q > T". 

Proof. The number of primes p < T satisfying p = 1 (mod g^) does 
not exceed T/g^. Using the inequality 

V ^ < 2T1-", 

q>T°' ^ 

the result follows. □ 
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2.6. Additive relations in multiplicative groups. Let F C C* be 

a multiplicative group of rank r and let ai, . . . , a„ G Z. We consider 
the equation 

(4) aiXi + . . . + a„x„ = 1, Xi, . . . , x„ G F. 

Recall that a solution of (jl]) is non- degenerate provided no subsum 
equals zero: 

ajXj 7^ for X C {1, ... , n}. 

We use the following result of Evertse-Schlickewei-Schmidt [TU] . 

Lemma 15. T/ie number of non- degenerate solutions of (jlj) zs most 
exp(c(n)r). 

Recall that a solution of (jl]) is non-degenerate provided no subsum 
equals zero: 

ajXj 7^ for X C {1, . . . , n}. 

Corollary 16. Let F C C* 6e as in Lemma [75| and let A C be a 

finite set of cardinality = m. For G Z* the number of 

solutions of the equation 

(5) aiXi + . . . + anXn = 0, xi, . . . , a;„ G F fl ^. 

is at most O (m'-"/^-' + exp{0{r))m^^"~^^^'^^) , where the implied con- 
stants may depend on n. 

Proof. In what follows, the implied constants may depend on n. 

We prove the statement by induction on n. For n = 1,2 the state- 
ment is trivial. We assume that for some k > 3 the statement holds for 
all n < k, and we now prove it for n = k. We can fix = 6 G F fl ^ 
such that the number J of solutions of ([5]) is not greater than m times 
the number of solutions of the equation 

(6) aiyi + . . . + a„_iy„_i = 1, 2/1, . . . G Fo n A, 

where Fq = (G U {— a.„6}) C C* (the group generated by G U {— a„6}) 
and 

Ao = {x{—anb)~^ : x G A}. 
To each solution of ([6]) we attach a subset (possibly empty) I C 
{1, . . . , n — 1} with the largest cardinality such that 

If for a given solution there are several such subsets, then for this 
solution we attain one of these subsets. 
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Given a subset XC {l,...,n — 1} (including an empty subset) we 
collect together those solutions of (E]) for which X has been attained. 
There exists a fixed XC{l,...,n — 1} such that 

(7) J < mJo, 

where Jo is the number of solutions of (EJ corresponding to the set X. 
We have 

(8) ajyj = 0, yj eVoHAo 
and 

(9) = 1' ^ 

je{l,...,n-l}\I 

In particular, X is a proper subset of{l,...,?7, — 1}. Observe that by the 
maximality of X the solutions considered in (Q are non-degenerate. If 
#X = n — 2, then ([9]) has at most one solution, so that the quantity Jq 
is bounded by the number of solutions of ([8]). Hence, by the induction 
hypothesis and by ([7]) we have 

J < m(mL("-2)/2J + exp(0(r))mL("-3)/2J) 

< mL"/2J +exp(0(r))mL("-i)/2j^ 

and the result follows. 

Let now < n — 3. By Corollary [16], the number of non-degenerate 
solutions of iQ is bounded by exp(0(r)). Furthermore, since #X < 

— 3, by the induction hypothesis the number of solutions of ([8]) is 
O (mL('^-3)/2J +exp(0(r))mL("-4)/2J). Therefore, by d?]) we have 

J < exp(c(n)r)mL("-i)/2J + exp(c(n)r)mL("-2)/2J 

^exp(cHr)^Ln/2j + exp(c(n)r)mL("-i)/2J , 
m 

for some constant c(n) that depends only on n. 

If exp(c(n)r) > m, then the trivial estimate J < m" implies 

J < exp{nc{n)r) 
and are done in this case. If exp(c(n)r) < m, then 
J < mL"/2J + exp(c(n)r)mL("-i)/2j 

and the result follows. □ 
Lemma 17. Let /3 G C and m G Z+. Consider a set 
A^{l3+j : 1 < J < m} C C 
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with > . Then there is a multiplicatively independent subset 
Aq A of size 

#^0 > c(r) logm, 
where c(r) > depends only on r. 

Proof. Denote T = (A) C C* the multiplicative group generated by A. 
If Aq A is a maximal multiplicatively independent subset, clearly 
for each x & A we have G (^o) for some positive integer k. Hence 

rankr = r < ^Aq. 

We note that for an integer n > 1 the sums z = Xi + . . . + x„, 
Xi,...,Xn G A take values in a set Zn of cardinality i^Zn < nm. 
Let Nn{z) be the number of such representations. Then, 

+ ...+Xn- Xn+l - . . . - a;2„ = 0, Xi, . . . ,X2n ^ A} 

2 



Applying Corollary 




1 ,„,,2n^(#^) 



2n 



nm 



' < exp(C(n)r) (#^)" . 



m 

for some constant C{n) that depends only on n. Since > m^, we 
derive 

m™"-^ < exp(C(n)r). 

Taking n = [2r~^], it follows that r > c(r)logm for some positive 
constant c(r) that depends only on r. □ 

3. Multiplicative and Polynomial Congruences and 

Equations 

3.1. More general congruences. To estimate K^{p,h,s) we some- 
times have to study a more general congruence. For a prime p, an 
integer z/ > 1, and vectors 

h=(/^l,...,MeN2^ 

s= {si,...,S2u) eFf , 

e=(ei,...,e2.)G{-l,l}2^ 

we denote by K^{p, e, h, s) the number of solutions of the congruence 

{xi + SiY' . . .{X2u + s^vT" = 1 (mod p), 
1 < Xj <hj, j = 1, . . . , 2z/. 
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The following result from relates ^^(p, e, h, s) and K^{p, h, Sj), 
j = 1, . . . , z/. (The proof is almost instant if one expresses Ki,{p, h, s) 
via multiplicative character sums and uses the Holder inequality.) 

Lemma 18. We have 

3.2. Multiplicative congruences and polynomial congruences 
with small coefficients. First we derive a certain condition on s for 
which the congruence ([T]) has many solutions with 

(10) {xi,...,a;,}n{i/i,...,?/,} = 0, 

In fact this has already appeared as a part of the argument in [4j, 
however here we present it in a self-contained form and in a much large 
generality that we need here: 

Lemma 19. Let h < O.bp^^" . Assume that for some integer s there are 
at least N solutions to ([T]) that satisfy the condition ( fTOl) . Then there 
are Nh~^ exp {0{\ogh/ loglog/i)) distinct non-constant polynomials 

R{Z) = AiZ"-^ + . . . + + A,e Z[Z], 

with 

\Ai\ < ^ = 

and such that R{s) = (mod p). 
Proof. We associate with any solution 

y.= {xi,. . . ,Xy) and J = iyi, ■ ■ ■ .Vu) 
of ([1]) that also satisfy (fTOjl . the polynomials 

P^{Z) = {xi + Z)...{x, + Z), 

and then set 

(11) R^,y{Z)=P^{Z)-Py{Z). 

In particular, since Rx,y{s) = (mod p) and h < 0.5p^^'^ it follows 
that i?x,y(^) is not a constant polynomial (for otherwise it is identical 
to zero which is impossible by (fTOj) ). Clearly each polynomial i?x,y(2^) 
satisfies all the required condition. 

By the Dirichlet pigeon-hole principle we have at least N/ h solutions 
with the same xi = xl- We claim that any polynomial R induced by 
these solutions occurs at most exp (co(z/) log h/ log log h) times for some 
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co(z/) depending only on v. Indeed, fix R and assume that R = Rx,y 
Let M = R{—xl) and Zi = —xl + yi, i = 1, . . . We have 

(12) M = -P^{-xl) - Py{-xl) = -Py{-xl) = -zi... z,. 

Using the well-known bound on the divisor function (a special case 
of Lemma [3] below), we see that the number of solutions to (fT2l) is 
bounded by exp (co(z/) log /i/ loglog Zi). Each solution determines the 
numbers yi, . . . ,yi, and the polynomial P^, and for each P there are 
at most (i/ — 1)! solutions of ([T]) with P = P^. This concludes the 
proof. □ 

3.3. Common solutions to many congruences. We recall the fol- 
lowing result from [4j: 

Lemma 20. Let 7 G (0, 1) and let I and J be two intervals containing 
h and H consecutive integers, respectively, and such that 

h<H<:^. 

15 

Assume that for some integer s the congruence 

y = sx (mod p) 

has at least 7/1 + 1 solutions in x ^ I, y E J. Then there exist integers 
a and b with 

, , H ,1 
|a| < 0<6<-, 
7/1 7 

such that 

s = a/b (mod p). 

We also need the following estimate: 

Lemma 21. There is an absolute constant Co > such that if for some 
s there are 

T>Co max{/i, h^p-^/\ h^p~^} 
different triples {U, V, W) with 

\U\<3h, \V\<3h\ \W\<h^ 



such that 

Us^ + Vs + W = (modp), 
then there are integers r and t satisfying conditions 

< |r| < /i3/2r-i/2, \t\ < h^/^T-^/\ rs = t (mod p). 
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Proof. We remark that if we fix U and V, then there are at most 
2h^/p + 1 possible values for W. In particular, we have 

T < 36h^{2h^p'^ + 1). 

Thus, since Co is sufficiently large, we see that h < cop^^^ for some 
small positive constant cq. 
We define the lattice 

r = {(m, t>, w) G : us^ + vs + w = (modp)} 

and the body 

D = {{u,v,w) eZ^ : \u\<3h, \v\<3h'^, \w\ < h^}. 
We know that 

#(D n r) > T. 

Therefore, by Lemma [H the successive minima Aj = Aj(D,r), i = 
1, 2, 3, satisfy the inequality 

n 

(13) Y[mm{l,\i} <t:T-\ 

i=l 

We can assume that T is sufficiently large. In particular, Ai < 1. We 
consider separately the following four cases. 

Case 1: A2 > 1. Then the inequality f lT3|) tells us that Ai ^ T^^. 
By definition of Ai, there is a nonzero vector {u,v,w) G \iD fl V. We 
have 

\u\ < /iT-\ < /i^T^^ < /i^T^^ 

Thus, assuming that Co is large enough, we see that -u = 0. Since 
T ^ /i, we see that r = — f , t = w satisfy the desired bound. 

Case 2: Ai < l/(3/i), A2 < 1, and A3 > 1. By definition of Ai and 
A2, there are linearly independent vectors {ui,Vi,Wi) G \iD fl T and 
(^25 "^^2? ^^2) € A2-D n r. Moreover, gcd{ui,Vi,Wi) = 1. We see that 
< Ai(3/i) < 1. Hence, ui = 0. We observe that A2 > l/(3/i). 
Indeed assume that this is not true. Then U2 = and we get that 

ViS + Wi = (modp), i = l,2. 

Hence, V1W2 = V2W1 (mod p). Since the absolute values of the both 
hand side is not greater than 

3\i\2h^ < hys < p/3, 

we obtain that V1W2 = V2W1. This contradicts the fact that {ui,Vi,Wi) 
and (m2, "^^2, ""^2) are linearly independent. We also note that Ai > 
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l/(3/i^), since otherwise -Ui = t>i = 0, implying Wi = (as Wi = 
(mod p) and \wi\ < < p). In particular, 

(14) A1A2 > l/{9h^). 
By (fT3l) . we have 

(15) AiA2<T-\ 
We consider the polynomials 

Pi{Z) = UiZ"^ + ViZ + Wi, i = 1,2. 

We see that degPi = 1 and 1 < degP2 < 2. If degP2 = 1 then we 
conclude from Lemma [2] that 

|Res(Pi,P2)| < /i'AiA2. 

Using (HM we get 

|Res(Pi,P2)|«/i«(AiA2)'. 

By m, 

(16) |Res(Pi,P2)| < /i'T~^ 

If deg P2 = 2 then we conclude from Lemma [2] that 

|Res(Pi,P2)| < /i'A?A2 < /i'(AiA2)', 

and due to f|T5|) . we get f|T6|) again. On the other hand, we see that 
Res(Pi, P2) is divisible by p since Pi(s) = P2(s) = (mod p). If Cq is 
chosen to be large enough, we conclude that 

Res(Pi,P2) = 0. 

Therefore, degP2 = 2 and P2 is divisible by Pi in Z[Z]. Thus, 

U2wl — V2V1W1 + W2vl = 0. 

Hence, in view of gcd(f 1, wi) = 1, we get, for some integer k ^ 0, 

(17) U2 = vik, kw\ — V2W1 + W2V1 = 0. 
We recall that 

1^2! < X2h, \V2\ < A2/l^ \W2\ < \2h^. 

In particular, from the first equality of (fT7|l we get 

\Vl\ < \U2\ ^ A2/i. 

Together with \vi\ ^ Ai/i^, we get that 

\vi\ < {\1\2hy''. 
Now, the second equality of f|T7j) implies that 

kil < 2|?;2| + 2\w2Vi\^'^ < A2/i^ + {\i\2h^f'^. 
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Combining this with \wi\ <^ Xih^ we obtain that 

\wi\ < (AiAa/i')'/'. 

Consequently, by f|T5l) 

\v,\ « {XiX2h'y/' « h'/'T~'/', \w,\ « {X,X2h'y/' « /i^/2T-V2, 

and we obtain the required inequahty for r = — fi, t = Wi. 

Case 3: Ai > l/(3/i), A2 < 1, and A3 > 1. Note that ^ still holds. 
Hence, Ai < A2 <^ hT~^. By definition of Ai and A2, there are linearly 
independent vectors f 1, Wi) G XiD fl F and (^2, f2, W2) G A2-D fl F. 
We have 

luil-^h^T-^ \vi\'^h^T-\ \wi\'^h^T-\ i = 1,2. 

As in Case 2, we consider polynomials 

Pi{Z) = UiZ"^ + ViZ + Wi, i = l,2, 

and prove that Res(Pi,P2) = and thus Pi and P2 have the same 
linear factor rZ + t with gcd(r, t) = 1. In particular, 

rs + t = (mod p). 

Next, for some i G {1, 2} we have 7^ 0. For this i, the equality 

u-it"^ — Vitr + Wiv"^ = 0, 

implies that 

Ui = rk, 

for some integer k ^ 0. In particular 

|r| < \ui\ < X,h < h'^/T, \k\ < \ui\ < Xih. 

Furthermore, 

kt^ — Vit + WiT = 0, 

implying 

\t\ < 2\vi\ + 2{\wir\y/^ < X^h^ + [Xih^X.hy/^ < X,h^ < h^T. 

This produces the required r and t with 

|r| < /i^T'^ and \t\ < /i^T"^ 

that satisfy the desired bound (since T ^ h). 

Case 4'- A3 < 1. By definition of A,, there are linearly independent 
vectors {ui,Vi,Wi) G XiD fl F, i = 1,2,3. By (ITS]) , we have A1A2A3 ^ 
T~^. We consider the determinant 

Ui Vi Wi 

D = det I U2 f 2 UI2 

U3 V3 W3 
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Clearly, 

\D\ < /i^AiAsAa < h'^T-K 
On the other hand, from 

UiS^ + ViS + Wi = i = 1,2, 3, 

we conclude that D is divisible by p. Therefore, for a sufficiently large 
Co we derive D = 0, but this contradicts linear independence of the 
vectors {ui,Vi,Wi), i = 1,2,3. Thus this case is impossible. □ 

3.4. Products with variables from intervals. First consider the 
case of rational values of a and obtain an upper bound for the number 
of solutions of the equation (|3]) satisfying (fTOj) . Then we consider the 
case of irrational a and show that in this case that number is essentially 
smaller that the number of trivial solutions of ([3]). 

Lemma 22. Let u > 1 be a fixed integer. Assume that a = t/r for 
some integers r > 1 and t with gcd(r, t) = 1. Given an interval X = 
{xo + 1, . . . ,Xo + u}, we fix some v El. Then the number I of solutions 
of the equation 

(xi + a)... [x^ + a) = (yi + 0-) . . . {y^ + a) 7^ 0, 

with 

xx = v, X2,. . . ,Xy,yi,. . . El, 
and satisfying ( |T0|) . does not exceed 

f^f log(M + 2) 

/ < -j j- exp O ' 



\vr + t\ \ \loglog(M + 2) 

Proof. We rewrite the above equation as 

(18) {xiT + t)... {x^r + t) = {yir + t) . . . {y^r + t). 

Given a solution to the equation (ITSl) . we fix some j = 1, . . . ,v and for 
Xj consider Xj = \xjr + t\ (note that Xj 7^ 0). Taking into account 



that for i = 1 



yir + t = {yi - Xj)r (mod Xj), 

we conclude from f|T8|) that {yi — Xj) . . . {y^ — Xj)r'^ = (mod Xj). 
Clearly gcd(r, Xj) = 1. Therefore, (yi — Xj) . . . {y^ — Xj) = (mod Xj). 
In particular, {yi — v) . . . {y^, — v) = (mod Xj). 
This implies that 

(19) Xj = \xjr + t\<u'', ] = !,..., p. 

We now write {yi — v) . . . {y^ — v)= Xiw for some nonzero integer w 
with \w\ < h" /Xi. Therefore, by the well-known bound on the divisor 
function, for each fixed w we have at most exp (O (log /;,/ loglog /i)) 
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possibilities for yi, . . . ,yu- Thus the total number of possibilities for 
yi,...,y^ at most 

— exp (O (log h/ log log h)) = -j — -j— ^ exp (O {\ogh/ log log h)) . 

When yi, . . . ,yi, are fixed, using the bound (fT9!) and the bound on 
the divisor function we obtain exp [O (log h/ log log h)) possibilities for 
xi, . . . ,Xu, which concludes the proof. □ 

Lemma 23. Let u > 1 be a fixed integer. Assume that a = t/r for some 
integers r > 1 and t with gcd(r, t) = 1. Then, for h > 3, the number 
N of solutions of the equation ([3]) satisfying ( !T0|) does not exceed 

< YZ — TiT ^^P ( ^ 



max{/ir, \ yloglog/i 

Proof. We take a reordering {zi, . . . , Zh} of the elements from {1, . . . ,h} 
so that 

(20) \zir + t\< ...<\zhr + t\. 

We notice that for any u = 1, . . . ,h the set {zi, . . . , Zu} is a set of u 
consecutive integers. For u = 1, . . . ,h we denote by the number 
of solutions of satisfying (ITUl) such that {xi, . . . ,Xi,,yi, . . . ,y^} C 
{zi, . . . , Zu} and either Xj = Zu or y^ = z^ for some i = 1, . . . ,u. Clearly, 

h 

(21) iVi = 0, N = J2Nu, Nu<2uN:{u>1) 

u=2 

where A^* is the number of solutions of ( fTSil satisfying ( fTOil with xi = Zu 
and X = {zi, . . . , By Lemma [221 we have 

Nu < -. j- exp U 



If |t| > 2hr then \zur + 1| > |t/2| for any m, and we get from ([21 
" " / / 1 ' N N 2/1^^+1 / / log h 



< — j— — exp O 



t\ \ \loglog/i 



If \t\ < 2hr then, using that there cannot be three consecutive equal 
elements in the sequence fl20l) we obtain the inequality 

\zur + t\> {u- l)r/2 > ur/A 

which yields 



h 



-.E^e.p O .-e.p O^'-^ 



u=2 



log log h J J r V V log log h 
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and completes the proof. □ 

Next, we need a bound on the number of solutions N{h) to the 
equations 

uv = xy, i < u,v,x,y < h, 
which is given in [H Theorem 3]: 

Lemma 24. For h > 1, we have 

N{h) = log h + Kh^ + {h''^'''{\og hY'/'^) . 
for some constant k. 

Note that ^ Theorem 3] gives an explicit value of k. Furthermore, 
the error term in the asymptotic formula of Lemma [2l] has recently 
been improved in fTT], but this has no implication on our results. 

Now we consider irrational values of a. 

We say that a solution of the equation is trivial if . . . ,yu) 
is a permutation of (xi, . . . , Xi,) and nontrivial otherwise. It is easy to 
see that in the case when a is transcendental or algebraic of degree 
d > the equation ([3]) has only trivial solutions. Thus, it is enough 
to consider the case when a is of degree d < v. 

Lemma 25. For every v>d>2,h>?) and algebraic number o of 
degree d, the number Nu{h, a) of solutions of the equation ([3]) satisfy- 
ing (fTOj) does not exceed 

Proof. Let P{X) G Z[X] be an irreducible primitive polynomial such 
that P(o") = 0. Clearly, degP = d. Next, we consider the polynomial 

G(X) = (xi + X) . . . {x, + X) - (yi + X) . . . {y, + X) 

and factor G into irreducible over Q polynomials / G Z[X]. Since 
G{a) = 0, for some irreducible factor / G Z[X] of G we have /(a) = 0. 
Thus, /(X) = rP(X) for some rational number r, and since P is 
primitive, r is integer. Thus, G{X) = A{X)P{X) for some A G Z[X]. 
We have 

A{X) = J2 

By Lemma El we have 

(22) < h^+^ J = 0, . . . , z/ - - 1, 

where the implied constants depend only on u. 
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For V = 1, . . . ,h, we now estimate the number of solutions of the 
equation satisfying ([TII|) with xi = v. Clearly, 

h 

(23) N = J2Nv. 

v=l 

From G{—v) = P{—v)A{—v) we get that 

-{yi -v) . . .{y^-v) = P{-v)A{-v). 

By (122|) we have A{—v) <^ h'^^'^. Therefore, there are O (/i'^"'^) possible 
values for \{yi — v) . . . {yu — v)\. In turn, this implies that there are at 
most h''~'^ exp (O (log /i/log log h)) possible values for yi, . . . .y^. Once 
the variables yi, . . . .y^ are fixed, by Lemma [3] we see that there are 
exp [O (log /i/loglog h)) possibilities ioi X2, ■ ■ ■ .x^, (while Xi is fixed by 
Xi = v). Thus, 

and using ( 123|1 completes the proof of the lemma. □ 

We say that a solution xi, . . . ,x^,yi, . . . ,yi, to the equation is 
trivial if (yi, . . . , y^) is a permutation of (xi, . . . , 

Theorem 26. For every i'>d>2, h>3 and algebraic number a 
of degree d the number Mi,{h,a) of nontrivial solutions of ([3]) satisfies 
the inequality 

log h 
log log 

Proof. We use induction on u > d. For u = d all solutions are trivial, 
and there is nothing to prove. We verify the assertion for u > d as- 
suming that it holds for u — 1. Using induction hypothesis we conclude 
that the number of nontrivial solutions of ([3]) such that condition ffTOl) 
does not hold is bounded by 

log h 



M^{h,a) < /i^-'^+^exp ( O 



{2hu) ■ /i'^-i-^+i exp O 



log log h 



h''"''+^ exp ( O 



log h 



log log /z^ 

It suffices to add the number of solutions of ([3]) satisfying (fTOj) . Using 
Lemma [25] we complete the proof. □ 

Since the number of trivial solutions of ([3]) is ulh'^ + {h'^^^), we get 
the following: 
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Corollary 27. For every u > 1, h > 3 and irrational number a of 
degree d we have the asymptotic formula 

where the implicit constants depend only on v. 

Remark 28. It is certainly interesting to find best possible value of the 
exponent of h in Theorem l2Bi 

Remark 29. It is also interesting to understand for which d and v 
there are nontrivial solutions of (E]) for every algebraic number o of 
degree d and a sufficiently large h. 

Remark 30. One can try to get more precise forms of Theorem\2^ and 
Lemma depending on the coefficients of the minimal polynomial P 
for a (similarly to the estimates in Lemma \2^) . Such an improvement 
is of independent interest, however does not help the main goal of this 
work. 

4. Multiplicative Congruences and Equations for Almost 

ALL Parameters 

4.1. Bounds on the number of solutions of multiplicative con- 
gruences for almost all p. 

Theorem 31. Let u > 1 be a fixed integer. Then for a sufficiently 
large positive integer T, h > 3, for all but o{T / log^ T) primes p <T , 
if 3 < h < T then for any s G Fp, we have the bound 

'--''r-v^)exp(o(^)). 

Proof. We note that for u = 1 the result is trivial and we prove it for 
z/ > 2 by induction on u. 
Let 

i7, = T^/(2-i)(logT)-^/(2.-i)_ 

We consider the quadruples of polynomials (Pi, Qi, P2, Q2) with 
(24) P,{Z) = (xi,, + Z) . . . (x,,, + Z), QiiZ) = {yi,, + Z) . . . (yu. + Z), 
and 

for i = 1,2. Denote 

Ri = Pi — Qi, R2 = P2 — Q2- 
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Clearly, we have |Res(i?i, -R2)| = hP^^'' ■ \i h < H^, then there are at 
most OiHl"-^ log Hy) = o{T/ log^ T) primes p that divide Res(i?i, R2) 
with |Res(i?i,i?2)| ^ for at least h'^''"'^ quadruples (Pi, Qi, P2, Q2) 
(since each quadruples may correspond to at most 0(logiJi.) distinct 
primes and we have 0{h'^'^) distinct quadruples). If h > H^, then 
there are at most o(T/ log^ T) primes p that divide Res(i?i,-R2) with 
|Res(Pi,P2)| ^ for at least h^^log^T/T quadruples (Pi, Qi, P2, <52). 
Also, by the induction hypothesis, there are o(T/log^T) primes p not 
satisfying the condition 

(25) ;r._i(p, K s) < [h^-' + h-'^-'I'T-'") exp {o (^^^) ) • 

We now fix one of the remaining primes p <T and estimate, for any 
s G Fp, the cardinality of the set Q of quadruples of polynomials 
(Pi, Qi, P2, Q2) such that for i = 1,2 the polynomials P = Pi,Q = 
Qi are of the form with xi^i, . . . , Xu,i, yi^i, ■ ■ ■ , yu,i that satisfy ^ 
and ( ITOl) . and, moreover, Res(Pi,P2) 7^ 0. However, Res(Pi,P2) = 
(mod p). For any such quadruple, for any t = 1, . . . , /i, and for i = 1,2 
we consider polynomials 

P,,tiZ) = Pi{Z + t), Qi^t{Z) = Qi{Z + t), Ri^t{Z) = Ri{Z + t). 

We get Nh quadruples {Pi,t,Qi,t, P2,t,Q2,t)- They are not necessarily 
distinct, but the multiplicity of any quadruple is at most u since Ri^t{s — 
t) = (mod p) and any polynomial P, cannot coincide with Ri t for 
more than u distinct t. Thus, for h < Hy we have Nh/v < h"^^^^, or 

(26) < z/Zi^^ 

For h> Hywe have Nh/u < h'^" log^ T/T, or 

(27) N <uh'^''-^T~Hog^T. 

Let M be the cardinality of the set V of solutions of satisfy- 
ing ([TOD. We assume that M > z/(/i^ + h'^''-^/^T'^/^\og^T). By the 
Dirichlet pigeon-hole principle, there exists (Pi,Qi) G V such that the 
number of pairs (P2,Q2) £ 'P with (Pi, Qi, P2, <52) G Q is at most 
/^2i.~i/22--i/2 iQg2 y_ Therefore, the number Mq of pairs (Pi,P2) e V 
with Res(Pi, P2) = satisfies Mq > M - h^"-^/^ log^ T > M/2. Thus, 
by Corollary [5l we find an algebraic number P of logarithmic height 
0{\ogh) in an extension K of Q of degree [K : Q] < z/ such that the 
equation 

(28) (xi + /3) . . . {x, + /3) = {y, + {3)... {y, + /3) ^ 0, 
where 

l<Xi,yi<h i = !,...,!/, 
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has at least Mq/u solutions. Now we have that 

Q 

where a is an algebraic integer of height at most 0{\ogh) and g is a 
positive integer q <^ h'^, see [15J. From the basic properties of algebraic 
numbers it now follows that the numbers 

qxi + a and qi/i + a, i = l,...,z/, 

are algebraic integers of IK of height at most O (log h) . 

Using Lemma [31 we conclude that for a sufficiently large h the equa- 
tion has at most 

h" ex (o ( ^"^^ 

solutions. Therefore, the same estimate holds for the number of so- 
lutions of ([T]) satisfying (ITU]) . By (1231) we have a similar estimate for 
the number of solutions of ([T]) not satisfying (1101) . This completes the 
proof of the theorem. □ 

Taking the sum over h = 3 x 2^ , j > 0, we get the same exceptional 
set for all h. 

Corollary 32. Let u > 1 be a fixed integer. Then for a sufficiently 
large positive integer T , for all hut o{7c{T)) primes p < T, for any 
3 < h < T and for any s &¥p we have the bound 

MP, h, S) < {h^ + /,2-V22^-l/2) fo 

\ \logloga 

Clearly for h = 0{T^^^'^'^~^^) the first term in Theorem [3T] and Corol 
lary [32] dominates and both bounds take an almost optimal form 

log h 



Kip, h,s) < h^exp O 



log log h 



For a set ^ C Fp we denote 



A^'^^ = {ai . . . a^, : ai, . . . ^a^, e A}. 

Corollary 33. Let u > 1 be a fixed integer. Then for a sufficiently 
large positive integer T , for all but o{tt{T) primes p < T, if 3 < h < T 
then for any s G ¥p, for the set 

A= {x + s : I < X < h} C¥p 

we have 

#^M>min(/A(ftT)'/^)e.p(o(j^)). 
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4.2. Asymptotic formula for the number of solutions of multi- 
plicative equations for almost all a G C. 

Theorem 34. For every u > 1, h > 3 and e with 2 > e > for all but 

0{h^^'^) values of a E C we have the asymptotic formula 

Proof. By Corollary [271 we have the desired estimate for irrational cr, 
so it is enough to consider only rational a. 
We denote 

S = {s = t/r : r,t e Z, \t\ < h^+'^^, 1 < r < h'/^}. 

Clearly, j^S = 0(/i^+^). It suffices to prove the desired asymptotic 
formula for s G Q \ iS. We follow the proof of Theorem [221 We say 
that the solution of ([3]) is trivial if {yi,...,yu) is a permutation of 
{xi, . . . , Xu). The number of trivial solutions is 

Using induction on u, we prove the number of nontrivial solutions is 

where C{k) depends only on k. For i/ = 1 all solutions are trivial. 
We prove the assertion for u > 1 assuming that it holds for z/ — 1. 
Using induction hypothesis we conclude that the number of nontrivial 
solutions of ([3]) such that condition ( 1T0|) does not hold is bounded by 

To estimate the number N of solutions of ([3]) satisfying ( ITOl) we use 
Lemma [231 We write s = t/r where t G Z, r G N, gcd(r, t) = 1. Since 
s ^ S, we have max{/ir, > Hence, by Lemma [231 

as required. □ 

We now note that the bound of Theorem [Ml on the size of exceptional 
set of a is quite precise even if one restricts cr to integer values. 

Theorem 35. For every v >1 and 1/2 > e > for all integers s with 
1 < s < hiloghy/'^'^ we have 

K,{h,s):^h^{\oghf'. 
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Proof. As before, let N[h) be the number of integer solutions of the 
equation 

uv = xy, 1 < u,v,x,y < h. 

We note that 

N{h + s) - N{s) < 4:i^{{u,v,x,y) eZ'^ : uv = xy, 

s + l<u<s + h,l<v,x,y<s + h}. 

Take an arbitrary prime p > 2(s + h^. Then, in the above range of 
variables, the equation uv = xy is equivalent to the congruence uv = xy 
(mod p). Using Lemma fT8| we derive 

i^{{u, V, X, ?/) G : uv = xy, s + 1 < u < s+h, 1 < v,x,y < s + h} 

<K2{h,sY'*N{h + sf'\ 

Thus, we have 

(29) N{h + s)- N{s) < AK2{h, sf'^N{h + sf'\ 

We now consider two cases. 

Case 1: s <h/2. Then for a sufficiently large h, by Lemma l24l have 

N{h + s)>N{h)>h^\ogh and N{s) < N{\h/2\) < ^.bh^logh. 

Thus, 

N{h + s)- N{s) > 0.5/1^ log h. 
By Lemma [2l] again, we have 

N{h + s) < 2h^\ogh. 

Inserting these bounds into (!29|) . we obtain K2{h, s) ^ h"^ log h and the 
result follows in this case. 

Case 2: h/2 < s < hlogh. Then from Lemma [2^ we get 

N{h + s) - N{s) > shlogh. 

By Lemma [2l] we also have 

N{h + s) < shlogh. 

Combining these bounds with bounds ( l29l) . we obtain K2{h,s) ^ 
h'^{\oghf^. □ 
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4.3. Asymptotic formula for the number of solutions of mul- 
tiplicative congruences for almost all s G Fp. We start with the 
cases oi u = 2 and u = 3 where we have stronger results that in the 
case of arbitrary u. 

Theorem 36. For every e with 2 > e > and 

3<h< pl/(2+e/2) 

for all but 0{h^~^'^) values of s &¥p we have the asymptotic formula 

log h 



K^ip, h, s) =2h^ + (^h^-'/^ exp (^O 



log log h 



Proof. Assume that s is such that 

(30) (xi + s) {X2 + s) = {yi + s) {y2 + s) ^ (mod p) 

is satisfied for at least /i^"^/^ exp (Ci \ogh/ log log h) choices of integers 
1 < xi,X2,yi,y2 < h with {xi,X2} 7^ {Z/I5Z/2}, where Ci > is a 
sufficiently large constant. 

Using Lemma [191 see that s satisfies at least C2h^~^^'^ distinct 
linear congruences As+B = (mod p) with < |A| < 2h and |-B| < h"^ 
where C2 > is another sufficiently large constant. Thus by Lemma [20| 
applied with 7 = 16/i^^/^ we obtain that s can take at most 0{h^^^) 
possible values. □ 

Theorem 37. For every e with 2 > e > and 

3<h< 

for all but 0{h^~^^) values o/s G Fp we have the asymptotic formula 

log h 
log log h ^ 

Proof. By Theorem [36], we see that there is a set 5 C Fp of cardinality 
0{h^~^'^) such that for all s G Fp \ 5, the equation f l30l) has at most 
/i^~^/^exp(0 (log /i/ log log /i)) solutions with {xi,X2} 7^ {yi,y2}- 
It is now easy to see that for s ^ S we have 

log h 
^ log log h ^ 

where denotes the contribution to K^^p, h, s) of solutions with 7^ 
Vj, 1 < j < 3. 
Assume that 

log h 



K3{p, h, s) =6h^ + (^h^~'/^ exp (^O (^^ 



Ksip, h, s) = 6h^ + (^h^-'/^ exp (^O J^- 



A^ 



log log h 

for some appropriate constant Ci > 0. 
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We see from Lemma [19] that for sufficiently large h and for another 
appropriate constant C2 > there are at least T = [C2/i^~^/^J different 
triples (f/, V, W) with 

\U\<3h, \V\<3h\ \W\<h\ 

such that 

Us"^ + Vs + W = (modp). 

Clearly, T satisfies the conditions of Lemma [211 thus there are some 
integers r and t with < |r| <^ /i-'^/^+^Z"^, t ^ and rs = t 

(mod p). 

Clearly we can assume that gcd(r, t) = 1. 
We see that 

(xi + s){x2 + s)(x3 + s) = {yi + s){y2 + s)(y3 + s) ^ (mod p) 
implies 

(Xi + X2 + X3 - t/i - t/2 - 1/3)^^ 

(31) +{xiX2 + XiXs + XsXs - yiy2 - ym - y2y3)rt 

+ ixiX2X-i - yiy2y3)r'^ = (mod p). 

The absolute value of the left-hand side of (I3T]) is at most lAh^^^^"^ < p, 
and we get the equation 

{xi +X2 + X3-yi-y2- y-i)t^ 

+{xiX2 + X1X3 + X2X3 - yiy2 - ym - y2y^)rt 

+ (X1X2X3 - ymysy^ = 0, 
which, in turn, we transform into an equivalent equation 

(xi + a){x2 + cr)(x3 + a) = {yi + cr)(?/2 + o-)(z/3 + cr) 

with a rational a = t/r. Since gcd(t, r) = 1 different values of s lead 
to different values of a. Using Theorem [3l| we conclude the proof. □ 

Furthermore, we have the following general form of Theorem 
which holds for an arbitrary u > 1. 

Theorem 38. For every v > 2, there exists some positive 7(1/) such 
that for 

3<h< 7(z/y/("'-i) 

and < e < 2 for all but 0(/i^+^) values of s E ¥p we have the 
asymptotic formula 

/f4p./.») = .!/." + 0(.-'=e.p(0(^))). 
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Proof. Without loss of generality we may assume that p is large enough. 
As before, we say that a solution of ([2]) is trivial if (yi, . . . ,yu) is a 
permutation of (xi, . . . , x^). Let S be the set of all s G Fp such that ([2]) 
has at least one nontrivial solution. If s G Fp \ {S"} then 

K^{p, h,s) = vlh" + O {h"-^) . 

Take s E S and fix a nontrivial solution (x^, . . . , x*,yl, . . . ,y of m. 
Define the polynomial 

R*iZ) = ixl + Z)... {xl + Z)- {yl + Z)...{y: + Z). 

Clearly, R* is not a zero polynomial and R*{s) = (mod p). In partic- 
ular, since — 1) < 1/z/ for z/ > 2 we see that R* is not a constant 
polynomial, assuming that p is sufficiently large. 

We decompose R* as a product of irreducible over Q polynomials 

R*{z) = Wi{Z)...Wn{Z) 

with Wj G Z[Z] for j = 1, . . . ,n. We have Wj{s) = (mod p) for some 
j. Denote VT* = Wj. 

Now we consider any nontrivial solution (xi, . . . , x^, yi, . . . , y^) of ([2]) 
and define the polynomial 

R{Z) = {xi + Z)... {x, + Z)-{yi + Z)... {y, + Z). 

Again, R is not a zero polynomial and R{s) = (mod p). As in the 
above we see that R is not a constant polynomial. 
Writing 

R{Z) = Y,r,Z^-'-^ 

j=0 

we see that 

(32) rj^h^+\ j = 0,...,z/-l. 
Clearly R* satisfies the same bound. So writing 

W*{Z) = Y.WjZ^'-^-^ 

3=0 

for some /i < z/ and applying Lemma |6l we infer 

(33) j=0,...,/i-L 

We have Res(i?, W*) = (mod p) since R{s) = W*{s) = (mod p). 
Next, by Lemma [21 (applied with p = = 1) we see that 

Res{R, W*) < h'''-\ 
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Thus, provided that 7(z/) is small enough and p is large enough we 
obtain the inequality 

\ResiR,W*)\ <p. 

Hence, Res(i?, W*) = 0. Using irreducibility of the polynomial W* we 
conclude that R is divisible by W* in Q[Z]. 

Consider a mapping $ : — )■ C by associating with any s G S" a zero 
(T of a corresponding polynomial W*. We see from the above discussion 
that any solution {xi, . . . ,x^,yi, . . . , yy) of congruence ([2]) induces the 
same solution of the equation ([3]). Thus, 

Using Theorem [SU we get 

A-„(p,ft..) = .!ft" + o(ft-/^exp(o(^))) 

unless a = is an element of an exceptional subset of C of cardi- 
nality 0{h^^'^). Taking into account that a preimage $~^((t) contains 
at most n < u — 1 elements for any a G C, we complete the proof. □ 

5. Distribution of Elements of Large Multiplicative 

Order 

5.1. Distribution in very short intervals for almost all p. Let 

ordptt denote the multiplicative order of a G F*. Our aim is to prove 
that for almost all primes p very short intervals in ¥p (including inter- 
vals of fixed size) contain an element of large multiplicative order. 

For h = 2, Chang [7] has shown that for any function ri{z) > with 
r]{z) — )■ as 2; — J- cxD and sufficiently large positive integer T, for all but 
o{n{T)) primes p <T, for all but 0(1) elements s G ¥p, we have 

(34) max{ ordp s, ordp (s + 1)} > p^/^+'^^l 

In fact her argument implies that (l34l) hold for almost all primes p and 
for any s G F* with ordp s > 3. 

We note that if ordp s = 3 then s -|- 1 = — (mod p) thus ordp (s + 
1) = 6. 

For small h we have the following result. 

Theorem 39. Let r]{z) > 0, m{z) > be arbitrary functions with 
ri{z) — )■ and m{z) 00 as z —> 00. Then for all but o(7r(T)) primes 
p <T, any interval I = [t,t + m(T)] has an element ^ for which 
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Proof. We assume that T is large enough. Using Lemma [I7| we take 
c = c(l/2) > 0. Note that either by increasing ri{T) or decreasing 
m(T), we may assume that ri(z) > (logz)~^^^ and that 

(35) m(T) = [r/(T)-^/''(^)J , C = 3/c. 
holds. Next, denote 

(36) m = m{T), r = [clogmj , = [m~^T^/2(r+2)j 

Given 81,82 ^ {l,---,'"^}. Si H 82 = ^ and #£^1 + ^ ]1 = 
ifj'j)j(^£iu£2 with 1 < fij < fi, denote 

Pe.,eM = U^X + jr^ - l[{X+jr^ e Z[X]. 

These polynomials are of degree at most rfi and logarithmic height 
0{rfi\ogm). Their number is clearly bounded by 2^~^^(^^fi^ (here we 
have used that r < m/2). 

Factor each polynomial P£-^^£^^ji{X) in irreducible (over Q) factors 
/ G 7j[X] and let ^ C Z[X] be the set of all polynomials obtained this 
way. Hence, 

(37) #*p<r2^+i(^'^^/i^+i. 
Denote then 

R= H Res(/,^7)GZ. 

Res(/,g)^0 

Using Corollary [5] we see that all coefficients of any polynomial / G *P 
are bounded by {0{m)Y^. Next, using a straightforward bound on the 
resultants Res(/, (7), by (1361) and (l37j) . we derive 

Let Pi and P2 be the sets of exceptional primes in Lemma [10] and 
Corollary [12] respectively. Hence, denoting 

Po = {p<T : gcd(p, R) = l, p^PiU P2}, 

we have 

#Po = (l + o(l))7r(r). 
Take p ePq. Since p ^Pi, the desired statement is equivalent to 

(38) ord,^>T'/^-^^^\ 
Let / = [t,t + m(T)] C Fp and assume that 

(39) ordp^ <T^^^^''(^^ for all ^ G /. 
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Since p ^7^2? "we may write p — 1 = AB, where A < T^i^'^^/'^ and B 
has no prime factors less than T^r,{T)/(\oi^{ih{m _ Hence, B has at most 
{1 / ri{T)Y / ^^^^'^^'> divisors. For ^ G I we write 

p-1 _ AB _ 

ordp ^ ordp ^ 

where a \ A, b \ B. In particular, ^ = g"-^ for some primitive root g 
modulo p. Thus, ^ belongs to the subgroup l-i of F* generated by the 
element g^. 

Since A < T^^'^^/'^^ using (!39|) . we derive that 

» — 1 » — 1 



a ordp e T(i-''(^))/2 ■ 
Thus, 

~ b 

Since -B has at most {l/ri(T)y^^^'^^'^'''^ divisors, the above argument 
shows that we have a family of at most (l/r](T)Y^^^'^^'^^^ subgroups 
n of F; of size 

and such that each element ^ G / is contained in one of these groups. 
Consequently, we conclude that there is a subgroup Ti of F* of order 

(40) ^n = N < T^^-^^^^y^ 

such that for the set S C [l,m], defined by 

t + s = nni, 

by the choice of parameters c, m and r in fl35l) and fl36l) . we have 
Let S ^ S, = r. Assuming all elements 

Hit + jr^ en 

with < fij < fi are distinct modulo p, it follows from ( !35l) and ( !36ll 

that 

contradicting ( l40l) . 

Hence, for each S C S with = r, there are disjoint Si,S2 ^ 
and exponents Jl = {fJ'j)jeeiu£2 such that 

^fi,£-2,M(^) = (modp). 
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We may then extract an irreducible (over Q) factor Z^; G *P from Pe^^e^,]! 
such that 

fE{t) = Q (modp). 
Thus, for all C ^ with = ^J^ = r 

R'es(/£-, /^) = (modp), 

while also Res{ f £, fjr) \ R. Since gcd{p,R) = 1, it follows that neces- 
sarily 

for all J-" C 5 of size = ^J-" = r. Since the fs are irreducible, 
they must coincide up to a scalar factor and hence have a common root 
/3 e C. 

Apply then Lemma [13 to ^ = 5 + /3 C {/3 + j; 1 < j < m} C C. 
This gives a multiplicatively independent set = S + (5 with some 
£ C S of size #£: = r. But since fei/S) = 0, we get P£^,£:,,fiil3) = 0, 
contradicting the multiplicative independence. □ 

5.2. Distribution in very short intervals for a large proportion 
of primes p. 

Theorem 40. If a & N, m > 1, l<yU< logm and T G Z_|_ is taken 
sufficiently large, then for all but 0(/i^^7r(T)) primes p < T we have 

max ordp(a + j) > T^-^'"^\ 

0<.j<m 

Proof. For small fi (and, in particular, for small m) the result is trivial. 
We assume that fi is large enough. Moreover, it is enough to prove the 
result for 

(41) /i< 0.1 logm. 
Take r = 4 [m^/^J . Then we have 

(42) r < m°-\ 

Let £ be the collection of all multiplicatively independent subsets S C 
/ = [a, a + m) of cardinality r. The set £ is nonempty by Corollary [HI 
Let T be sufficiently large (depending on a, m) and set 

K = [ri/('-+2)j ^ 

/ \ 



n 



5e£ 
5i,52C5,5in52= 



n - n 
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Hence, i? G Z \ {0} and for T large enough 
Hence, denoting 

Vo = {p<T : gcd(p,i?) = l} 

we have 

(43) #Po = (l + o(l))7r(T). 
Now we take 

and denote by Vi the set of primes p eVq such that 

(i) the product of all prime factors of p — 1 that are smaller than 
T° is at most T'^; 

(ii) the number of prime divisors g of j9 — 1 satisfying q > does 
not exceed 

0.2/xlog(/3/a) 1 

1-/3 

(iii) p — 1 has no divisor with q > T"'. 

By (143|) and Lemmas [TTl [131 and [HI we derive 

#Pi = (l + 0(l//i))7r(T). 
Also, observe that, by fHT]) . for large enough we have 

, 0.2ulog(/3/a) 1 , 

(44) — ^ ^ + - < 0.31ogm + /i < 0.41ogm. 

By assumption (i) in the definition of Vi, we may write p — 1 = AB, 
where A < T"^ and B has no prime factors less than T". By (ii) 
and (jH]), -B has at most 0.4 log m prime factors. By (iii), B is square- 
free. Therefore, the number of factors of B is at most 

20. 4 log m ^ ^0.3 

We assume that for j = 0, . . . , m — 1 we have 

ord,(a + j)<Ti-'""'^ 
By Corollary [HI we choose a set 

XC{a + j : j G [0,m[}, #X>v^/log"^5 
of multiplicatively independent numbers. For ^ G X we write 

p-1 AB 



ordp ^ ordp ^ 



a6 
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where a \ A, b \ B. Since B has at most m^'^ divisors, we can take a 
subset JT" C X with ^JT" > ^Xm^^-^ > m^-^ such that the same divisor 
6 of 5 is associated to any ^ ^ J . We have ^ = for some primitive 
root g modulo p. Thus, ^ belongs to the subgroup "H of F* generated 
by the element . We have 

J p— 1 p— 1 ^ p— 1 



a ordp ^ TT ordp ^ " j^i-O-Sm-V/^ ' 
Thus, JT" C "H and 

~ h 

By (H2l) . we can take a subset 5 C JT" of cardinality j^S = r. Since 
p G we conclude that all products 

n 

0<fc^<i<' 

are distinct modulo p. The number of such products is 

But this is impossible since all the products belong to "H. This com- 
pletes the proof. □ 

5.3. Distribution in longer intervals for almost all p. For large 
h we can use Theorem! 



Theorem 41. Let a > be fixed. ForT'' <h<T, for all but o{n{T)) 
primes p <T and for any s G ¥p, the set 

A= {x + s : I < X < h} <Z¥p 

contains an element a & A of multiplicative order 

Proof. We fix z/ > l/a. Clearly A contains a set i3 C ^ of elements of 
the same multiplicative order t and of cardinality 

(45) #i5>#^/r(p-l) = Vt(p-I). 

For A G F;, let 

Q{X) = i^{{xi, . . . ,x^) e B X . . . X B : X = xi...x^ (modp)}. 
Then obviously, 

#{A G ¥p : Q(A) > 0} < t. 
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Hence, using the Cauchy inequality, we obtain 

mf"" = f E ^(^) I ^ ^ E ^(^)' ^ ^^-^p^ 

\AeF; / agf; 

which together with Theorem [3T] and the standard estimate for r(p — 1) 
imphes the result. □ 

We note that for intermediate values of h, namely for h with T" < 
h < T^^" for some fixed a > 0, using the ideas and results of Erdos 
and Murty [9] one can improve slightly Theorem |4T1 Namely, one can 
show that for any function ri{z) > with ri{z) — we have 

ordpa> (/ir)i/2T''(^) 

instead of the bound of Theorem |4T1 
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